Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/OYJxFzkWRqT4fQyS_opPoFFN1DM.roa
File: OYJxFzkWRqT4fQyS_opPoFFN1DM.roa (raw, json)
Hash identifier: DWAMuSkJsuoqOwbo8uD02GQPNLRXgoC7t6mQHBAMQ6A=
Subject key identifier: 39:82:71:17:39:16:46:A4:F8:7D:0C:92:FE:8A:4F:A0:51:4D:D4:33
Certificate issuer: /CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Certificate serial: 0188583A6FD45C781A7CE6C8AE17BC9F54DC
Authority key identifier: 87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/OYJxFzkWRqT4fQyS_opPoFFN1DM.roa
Signing time: Fri 26 May 2023 13:23:24 +0000
ROA not before: Fri 26 May 2023 13:23:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211611
IP address blocks: 217.197.98.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:3a:6f:d4:5c:78:1a:7c:e6:c8:ae:17:bc:9f:54:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87dc1a9bffa2cf15a7d8099c8a3c317ce07db5ea
Validity
Not Before: May 26 13:23:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39827117391646a4f87d0c92fe8a4fa0514dd433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:88:7f:05:40:1b:f7:0d:18:09:06:23:76:
ee:8b:ae:fa:14:9f:65:2b:9c:02:b2:0b:19:53:1d:
62:e3:f0:b8:2d:f4:e6:99:22:f5:62:87:db:ca:c0:
d5:2c:1e:8c:63:d0:fe:21:4d:67:11:f5:e4:af:70:
f2:93:cb:d9:77:36:ae:a2:1f:9a:6c:5d:41:6f:e3:
8c:a5:14:8b:ca:a4:08:2e:25:f5:2c:ce:41:e0:69:
93:d3:b9:9b:19:66:11:14:23:8c:6e:84:34:13:50:
62:85:84:e8:47:01:0f:78:f6:f2:86:60:90:8f:ab:
cd:cf:9f:8c:fd:1e:b3:f5:00:69:d9:16:16:08:26:
04:8f:1c:28:d2:c2:d8:24:0b:79:08:74:f1:e1:54:
2d:c1:51:30:1b:2d:a5:51:91:29:85:96:43:c8:8b:
cb:82:d9:7a:09:33:56:dd:96:05:b6:76:c9:4f:42:
99:c0:e0:95:1c:0a:76:bb:c8:df:15:c1:23:06:7a:
d6:75:ac:08:4f:d1:cf:0a:54:54:ca:bc:46:88:39:
2c:aa:d4:c6:34:b3:06:34:e7:44:b4:0a:41:f2:f4:
be:23:cb:cd:81:1c:08:87:5f:8f:3c:94:ec:54:02:
b9:f3:49:f4:12:79:8a:06:62:17:4a:a2:bc:e2:a2:
7b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:82:71:17:39:16:46:A4:F8:7D:0C:92:FE:8A:4F:A0:51:4D:D4:33
X509v3 Authority Key Identifier:
keyid:87:DC:1A:9B:FF:A2:CF:15:A7:D8:09:9C:8A:3C:31:7C:E0:7D:B5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9wam_-izxWn2AmcijwxfOB9teo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/OYJxFzkWRqT4fQyS_opPoFFN1DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3d05e9-309d-4afe-811c-49ad9684b217/1/h9wam_-izxWn2AmcijwxfOB9teo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.98.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fa:ea:9f:14:22:dc:40:aa:27:a0:61:e1:eb:37:b1:30:81:
7e:8c:38:8c:51:6f:7e:2d:30:2d:15:df:05:fa:62:af:9b:c1:
c8:b1:79:0a:83:c2:79:20:ee:5f:59:13:f2:6d:99:0b:40:d8:
36:19:cb:c6:ff:da:65:11:a5:b1:f8:c5:80:c1:12:57:bd:5e:
3b:40:d7:29:ab:c8:d8:be:b6:45:51:1b:fa:60:3f:08:db:4c:
f2:fc:83:17:7b:be:df:ef:a7:70:4b:d5:6d:e5:95:5c:7a:26:
de:34:34:ab:2b:85:07:8d:75:10:04:36:2c:4f:ec:6d:1c:b8:
37:6e:02:94:ef:cc:e4:46:a4:e2:97:63:bf:12:c2:b1:8b:ed:
03:8e:8d:ae:55:34:84:cc:0f:79:b8:ef:99:2a:37:03:e5:05:
14:ea:cc:c1:57:04:92:f3:80:29:4b:d3:dd:82:52:cc:74:a3:
0d:b9:9a:ba:81:62:17:86:b4:2a:30:2f:aa:f9:17:b9:92:21:
42:80:36:d2:1e:3a:9d:08:e8:6e:4c:5f:97:a4:e7:52:27:38:
e1:c6:82:37:40:12:87:25:eb:2d:18:32:06:05:d1:a7:0f:d2:
3f:be:32:16:b0:c0:a2:08:13:9a:32:58:0e:aa:7c:a6:5b:3d:
7d:6c:60:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:35 2024 by rpki-client on console-ams.rpki-client.org